4.6.2
8 years ago
5 years ago
Known vulnerabilities in the lodash.mergewith package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for freeVulnerability | Vulnerable Version |
---|---|
lodash.mergewith is a Lodash method _.mergewith exported as a Node.js module. Affected versions of this package are vulnerable to Prototype Pollution. The functions How to fix Prototype Pollution? Upgrade | <4.6.2 |